← Back

CVE-2022-31258

nvd nist
Published: May 20, 2022Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.

Affected (88)

1 product
Checkmk
1 product
Checkmk
Configuration A
88 vulnerable
Vulnerable SoftwareAffected Versions
Checkmk
Before 1.6.0
Version 1.6.0 b10
Version 1.6.0 b12
Version 1.6.0 b1
Version 1.6.0 b3
Version 1.6.0 b4
Version 1.6.0 b5
Version 1.6.0 b9
Version 1.6.0 p10
Version 1.6.0 p11
Version 1.6.0 p12
Version 1.6.0 p13
Version 1.6.0 p14
Version 1.6.0 p15
Version 1.6.0 p16
Version 1.6.0 p19
Version 1.6.0 p1
Version 1.6.0 p20
Version 1.6.0 p21
Version 1.6.0 p22
Version 1.6.0 p23
Version 1.6.0 p24
Version 1.6.0 p25
Version 1.6.0 p26
Version 1.6.0 p27
Version 1.6.0 p28
Version 1.6.0 p2
Version 1.6.0 p3
Version 1.6.0 p4
Version 1.6.0 p5
Version 1.6.0 p6
Version 1.6.0 p7
Version 1.6.0 p8
Version 1.6.0 p9
Version 2.0.0
Version 2.0.0 b1
Version 2.0.0 b2
Version 2.0.0 b3
Version 2.0.0 b4
Version 2.0.0 b5
Version 2.0.0 b6
Version 2.0.0 b7
Version 2.0.0 b8
Version 2.0.0 i1
Version 2.0.0 p10
Version 2.0.0 p11
Version 2.0.0 p12
Version 2.0.0 p13
Version 2.0.0 p14
Version 2.0.0 p15
Version 2.0.0 p16
Version 2.0.0 p17
Version 2.0.0 p18
Version 2.0.0 p19
Version 2.0.0 p1
Version 2.0.0 p20
Version 2.0.0 p21
Version 2.0.0 p22
Version 2.0.0 p23
Version 2.0.0 p24
Version 2.0.0 p2
Version 2.0.0 p3
Version 2.0.0 p4
Version 2.0.0 p5
Version 2.0.0 p6
Version 2.0.0 p7
Version 2.0.0 p8
Version 2.0.0 p9
Version 2.1.0 b1
Version 2.1.0 b2
Version 2.1.0 b3
Version 2.1.0 b4
Version 2.1.0 b5
Version 2.1.0 b6
Version 2.1.0 b7
Version 2.1.0 b8
Version 2.1.0 b9
Tribe29
Version 1.6.0b10
Version 1.6.0b11
Version 1.6.0p10
Version 1.6.0p11
Version 1.6.0p12
Version 1.6.0p13
Version 1.6.0p14
Version 1.6.0p15
Version 1.6.0p16
Version 1.6.0p17
Version 1.6.0p18

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.